Lucene search
+L

133 matches found

Openbugbounty
Openbugbounty
•added 2016/03/13 1:38 a.m.•13 views

e2.emediate.se Open Redirect vulnerability

Vulnerable URL: http://e2.emediate.se/eas?camp=121995;kw=ringspann;EASLink=https://xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

6.9AI score
SaveExploits0
securityvulns
securityvulns
•added 2014/10/15 12:00 a.m.•79 views

SQL Injection in Е2

Advisory ID: HTB23222 Product: Е2 Vendor: Ilya Birman Vulnerable Versions: v2844 and probably prior Tested Version: v2844 Advisory Publication: July 2, 2014 without technical details Vendor Notification: July 2, 2014 Vendor Patch: July 3, 2014 Public Disclosure: July 23, 2014 Vulnerability Type:...

7.5CVSS0.3AI score0.02348EPSS
SaveExploits4
NVD
NVD
•added 2014/07/24 2:55 p.m.•42 views

CVE-2014-4736

SQL injection vulnerability in E2 before 2.4 2845 allows remote attackers to execute arbitrary SQL commands via the note-id parameter to @actions/comment-process...

7.5CVSS8.2AI score0.02348EPSS
SaveExploits4References4
Prion
Prion
•added 2014/07/24 2:55 p.m.•34 views

Sql injection

SQL injection vulnerability in E2 before 2.4 2845 allows remote attackers to execute arbitrary SQL commands via the note-id parameter to @actions/comment-process...

7.5CVSS9AI score0.02348EPSS
SaveExploits4References4Affected Software1
Cvelist
Cvelist
•added 2014/07/24 2:00 p.m.•49 views

CVE-2014-4736

SQL injection vulnerability in E2 before 2.4 2845 allows remote attackers to execute arbitrary SQL commands via the note-id parameter to @actions/comment-process...

8.2AI score0.02348EPSS
SaveExploits4References4
CVE
CVE
•added 2014/07/24 2:00 p.m.•71 views

CVE-2014-4736

CVE-2014-4736 describes an SQL injection in E2 before 2.4 (2845) via the note-id parameter to /@actions/comment-process. The root cause is insufficient input sanitization, allowing remote attackers to inject arbitrary SQL commands, potentially adding/modifying/deleting records or gaining site acc...

7.5CVSS8.5AI score0.02348EPSS
SaveExploits4References4Affected Software1
zdt
zdt
•added 2014/07/24 12:00 a.m.•75 views

E2 2844 SQL Injection Vulnerability

E2 version 2844 suffers from a remote SQL injection vulnerability. Product: Е2 Vendor: Ilya Birman Vulnerable Versions: v2844 and probably prior Tested Version: v2844 Advisory Publication: July 2, 2014 without technical details Vendor Notification: July 2, 2014 Vendor Patch: July 3, 2014 Public...

7.5CVSS7.6AI score0.02348EPSS
SaveExploits4
Exploit DB
Exploit DB
•added 2014/07/23 12:00 a.m.•41 views

Ilya Birman E2 - '/@actions/comment-process' SQL Injection

source: https://www.securityfocus.com/bid/68843/info Ilya Birman E2 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities ...

7.5CVSS5.2AI score0.02348EPSS
SaveExploits4
Packet Storm
Packet Storm
•added 2014/07/23 12:00 a.m.•56 views

E2 2844 SQL Injection

Advisory ID: HTB23222 Product: Е2 Vendor: Ilya Birman Vulnerable Versions: v2844 and probably prior Tested Version: v2844 Advisory Publication: July 2, 2014 without technical details Vendor Notification: July 2, 2014 Vendor Patch: July 3, 2014 Public Disclosure: July 23, 2014 Vulnerability Type:...

7.5CVSS6.6AI score0.02348EPSS
SaveExploits4
exploitpack
exploitpack
•added 2014/07/23 12:00 a.m.•31 views

Ilya Birman E2 - @actionscomment-process SQL Injection

Ilya Birman E2 - @actionscomment-process SQL Injection source: https://www.securityfocus.com/bid/68843/info Ilya Birman E2 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to compromise the application,...

0.3AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2012/07/11 8:52 p.m.•16 views

Indian Officials Get Training from Hackers who cracked CERN's IT system

Two Argentina-based cyber security experts - Chris Russo and Fernando Viacanel, who claimed to have cracked the security code of IT systems involved in the discovery of 'God Particle', today conducted training sessions for Indian government officials. Both the hackers are partners of IT security...

7.2AI score
SaveExploits0
exploitpack
exploitpack
•added 2011/05/03 12:00 a.m.•17 views

E2 Photo Gallery 0.9 - index.php Cross-Site Scripting

E2 Photo Gallery 0.9 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47697/info E2 Photo Gallery is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2011/05/03 12:00 a.m.•25 views

E2 Photo Gallery 0.9 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47697/info E2 Photo Gallery is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

5.3AI score
SaveExploits0
Rows per page
Query Builder